Medium · 5.5 CVE-2025-24278 EUVD-2025-8941GHSA-jrgv-pmf9-6qg5

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventur…

Published Mar 31, 2025 · Updated Jul 23, 2026 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	< 13.7.5, < 14.7.5, < 15.4	13.7.5

Advisories 2

WID-SEC-2025-0668 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2026
NCSC-2025-0102 Kwetsbaarheden verholpen in Apple macOS NCSC-NL (Netherlands) · Apr 1, 2025

References

https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122374
https://support.apple.com/en-us/122375

EUVD	v3.1	5.5
CISA-ADP	v3.1	5.5